Distributed access control
AssigneeMicrosoft Technology Licensing, LLC
InventorAbhijeet Haldar
Life of this patent
Estimating the term…
Abstract
A distributed access control system is disclosed. A payload is received at a voted principal from the client. The voted principal is selected from the plurality of minors. The payload is passed to the minors, and the user is verified by a consensus of the minors. A response packet, which includes an authentication unit, is prepared via a consensus of minors. The response packet can be provided to the client via the voted principal. The ledger is updated to include the authentication unit.
Claims19
A method of distributing access control in a distributed ledger, the method comprising:
- receiving a payload at a voted principal of a plurality of networked minors, the principal including a selected minor determined by the plurality of minors;
- verifying a user from the payload via a consensus of the minors, the minors including a ledger of user data, the payload verified against the distributed ledger of user data, the payload does not include user information included in the distributed ledger;
- preparing a response packet having an authentication unit via the minors, wherein the minors generate a response token for the response packet and a first minor of the plurality of minors to generate the response token notifies other minors of the plurality of minors to stop generating the response token, the response packet provided via the principal;
- and
- updating the distributed ledger to include the authentication unit.
A computer readable storage device, which is not a propagating signal, to store computer executable instructions to control a processor to:
- receive a payload at a voted principal of a plurality of networked minors, the principal including a selected minor determined by the plurality of minors;
- verify a user from the payload via a consensus of the plurality of minors, the minors including a distributed ledger of user data, the payload verified against the ledger of user data, the payload does not include user information included in the distributed ledger;
- prepare a response packet having an authentication unit via the networked minors, wherein the minors generate a response token for the response packet and a first minor of the plurality of minors to generate the response token notifies other minors of the plurality of minors to stop generating the response token, the response packet provided via the principal;
- and
- update a distributed ledger to include the authentication unit.
A system, comprising:
- a memory device to store a set of instructions;
- and
- a processor to execute the set of instructions to:
- receive a payload at a voted principal of a plurality of networked minors, the principal including a selected minor determined by the plurality of minors;
- verify a user from the payload via a consensus of the plurality of minors, the minors including a distributed ledger of user data, the payload verified against the ledger of user data, the payload does not include user information included in the distributed ledger;
- prepare a response packet having an authentication unit via the networked minors, wherein the minors generate a response token for the response packet and a first minor of the plurality of minors to generate the response token notifies other minors of the plurality of minors to stop generating the response token, the response packet provided via the principal;
- and
- update the distributed ledger to include the authentication unit.
Dependencies are inferred from the claim text.